Title: PC Live Guard

Type: Rogue Antispyware

Remove PC Live Guard. Removal instructions

Also known as: PCLiveGuard, PCLive Guard, PC LiveGuard

Severity scale:

(70 / 100)

PC Live Guard is a fake spyware removal tool that imitates a system scan and reports false scan results to make you think that your computer is infected with malware. If you take a look at Live PC Care malware, you will see that these two programs are basically the same thing. Both impersonate Windows Security Center to make this scam look more realistic. PC Live Guard is promoted mostly through the use of Trojans. Once installed, it displays fake security alerts and asks to pay for a full version of the program to remove infections which do not even exist. Do not buy this bogus software and get rid of PC Live Guard from your computer upon detection.

[Figure 1. PC Live Guard graphical user interface]

When running, PC Live Guard will create several files on your PC and later will detect those files as malware infections. The files are: cb.drv,sld.drv, CLSV.sys, FW.dll, DBOLE.exe, DBOLE.sys, kernel32.drv, PE.tmp, SM.dll, ppal.dll, SICKBOY.tmp. For example, DBOLE.sys will be detected as Trojan-Spy.Win32.WMPatch infection. Such infection indeed exists, but not in your computer. PC Live Guard uses real infections and their descriptions in case you decide to read more about particular one. That makes this scam even more realistic. Some other malware infections reported by PCLiveGuard:

Trojan-SPW.Win32.Fantast
Trojan-Spy.HTML.Bankfraud.ra
Virus.Win32.Faker.a
BAT.Looper
Trojan-PSW.VBS.Half
Trojan-PSW.Win32.Delf.d
Trojan-Spy.HTML.Paypal.hn
Trojan-Spy.HTML.Bayfraud.hn
Trojan-Spy.HTML.Bankfraud.ix
Trojan-Spy.HTML.Citifraud
Packed.Win32.PolyCrypt
Trojan-Spy.HTML.Sunfraud.a

[Figure 2. Pcliveguard.com]

What is more, PC Live Guard will display fake security alerts and notifications as shown below. The fake notifications state:

System alert!
malicious applications, which may contains Trojans, were found
on your computer and are to be removed immediately. Click
here to remove these potentially harmful items using PC Live
Guard.

System alert
Click here to remove potentially harmful programs found
immediately using PC Live Guard.

It will also hijack Internet Explorer and display similar fake security warnings while browsing the web. Likely, it will change default search engine to search-gala.com and display its search results. There shouldn't be any doubts about this rogue application. Remove PC Live Guard from your computer as soon as possible using the removal guide below. You may remove it either manually or with an automatic removal tool. Please note, that this malware may block legit anti-spyware applications including Spyware Doctor. If this happens, please use Process Explorer and terminate PC Live Guard and other malicious processes.
If you have inadvertently purchased PCLive Guard, contact your credit card company and dispute the charges.

Related files: PC339.exe, PCLG.ico, 573.mof, mozcrt19.dll, sqlite3.dll, vd952342.bd, PCAWWLG.cfg, PC Live Guard.lnk, cookies.sqlite, gid.tmp, SICKBOY.tmp, sld.drv

PC Live Guard properties:
• Changes browser settings
• Shows commercial adverts
• Connects itself to the internet
• Stays resident in background

Automatic PC Live Guard removal:

remover for PC Live Guard

SpyHunter is recommended remover to uninstall PC Live Guard. You should confirm using free trial that it detects current version of parasite.

Note: Tested and Confirmed means that we have tested spyware remover with multiple versions of PC Live Guard and got the best results. There might be updated or modified version of particular parasite that require manual killing of parasite process or an update. In such case try other removers in the line.

Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove PC Live Guard using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

Tested and Confirmed! STOPzilla removes PC Live Guard (2009-12-07 01:17:31)

Malwarebytes Anti Malware

download | review

Tested and Confirmed! Malwarebytes Anti Malware removes PC Live Guard (2009-12-07 01:17:31)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing PC Live Guard (2010-01-13 02:50:17)

XoftSpySE Anti Spyware

download | review

PC Live Guard manual removal:

FORUM:
Discuss PC Live Guard in
spyware removal forum

Kill processes:
PC339.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_CURRENT_USER\Software\3
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}
HKEY_CLASSES_ROOT\xp_edb11.DocHostUIHandler
HKEY_CURRENT_USER\Software\Classes\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "IIL"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Download "RunInvalidSignatures" = "1"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "[xSP_2:117fc3395e69e29f71abba93a68c4181_7]"
HKEY_CLASSES_ROOT\Software\Microsoft\Internet Explorer\SearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "PC Live Guard"

HELP:
how to remove registry entries

Unregister DLLs:
mozcrt19.dll sqlite3.dll

HELP:
how to unregister malicious DLLs

Delete files:
PC339.exe PCLG.ico 573.mof mozcrt19.dll sqlite3.dll vd952342.bd PCAWWLG.cfg PC Live Guard.lnk cookies.sqlite gid.tmp SICKBOY.tmp sld.drv

HELP:
how to remove harmful files

Delete directories:
C:\Documents and Settings\All Users\Application Data\117fc\
C:\Documents and Settings\All Users\Application Data\117fc\PCLGSys
C:\Documents and Settings\All Users\Application Data\117fc\BackUp\
C:\Documents and Settings\All Users\Application Data\117fc\Quarantine Items\
C:\Documents and Settings\All Users\Application Data\PCYZDUHBELG
%UserProfile%\Application Data\PC Live Guard
C:\Program Files\Mozilla Firefox\searchplugins\search.xml

Information added: 2009-12-07 01:17:31
Information updated: 2010-01-13 00:13:02

Additional resources related to PC Live Guard:

Attention: If you know or you have a website or page about PC Live Guard removal, feel free to add a link to this list: add url

more resources

<Guest>

I encountered the pc live guard page and downloaded setup_build6_294 but didn't run it and deleted it, will my pc be ok?

Reply »

2010 01 04

Post Comment:

Attention: Use this form only if you have additional information about PC Live Guard parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.